[Pkg-shadow-devel] Bug#923478: initscripts use unsafe `: >` shell command to create files

[Chris Hofstaedtler]

* Dmitry Bogatov <KAction at debian.org> [190429 01:14]:
> [2019-04-26 13:17] Chris Hofstaedtler <zeha at debian.org>
> > > According my experiments, it will. Even if I remove this code, something
> > > (login/getty, maybe?) still creates /var/run/utmp, root:root.
> >
> > Which init was used in your experiments?
> 
> sysvinit-core.

https://sources.debian.org/src/sysvinit/2.93-8/src/init.c/?hl=2797#L2797

Note that the comment citing the preconditions is not telling the
entire story on modern systems.

Cheers,
Chris